It is the established policy of Deploy Recruitment group (The Group consists of Deploy (UK) Ltd and Deploy (UK) Rail Ltd) to operate within the requirements of a documented Information Security Policy statement as a means to comply with all statutory, regulatory and contractual requirements, and, to protect the interests, property and information of the company, and of its clients and employees, against threats or loss. And applies to the processing of personal data in manual and electronic records kept by the Company as described below. It also covers the Company's response to any data breach and other rights under the General Data Protection Regulation (GDPR) and current Data Protection Act.
In pursuance of this policy its stated requirements have been implemented together with the specified requirements of the company's associated information security and computer system access management work instructions.
The purpose of this Information Security Policy statement is to describe how security is implemented, to give guidance to our employees whose actions can affect the confidentiality and integrity of the business, its product and services, and, to illustrate the overall commitment to security issues within our company.
This Policy statement, which is not intended as a stand-alone document, is supported by detailed process operating procedures and to form a set of working documents, which define our company's security activities.
The Policy is maintained by audit and review, in order to provide effective assurance that all aspects of company, employee and customer specified security requirements are being implemented.
It is company policy to ensure that the use of documents, computers, mobile computing, mobile communications, mail, voice mail, voice communications in general, multimedia and postal services must be controlled to prevent unauthorized use and to reduce security risks.
All employees have a responsibility not to compromise the company, e.g. by sending defamatory or harassing electronic mail, or by making unauthorized purchases, and, must also be aware that the confidentiality and integrity of information transmitted by E-mail may not be guaranteed.
Access by employees to the Internet is restricted to business use only and any breach of this policy will result in disciplinary action being taken.
The Manager is responsible for managing information security, and he will also ensure that all employees are trained to understand, implement and maintain the security objectives set out in this Security Policy and as detailed in the company's security related Work Instructions.
The Company makes a commitment to ensuring that all personal data is processed in line with GDPR and domestic laws and all employees conduct themselves in line with this. Where third parties process data on behalf of the Company, the Company will ensure that the third party takes such measures in order to maintain the Company's commitment to protecting data.
Personal data is kept in your personnel file. The following types of data may be held by the Company, as appropriate, on relevant individuals:
Some special categories of personal data, such as information about physical or mental health or disability, is processed to ensure your health and safety in the workplace and to assess your fitness to work, to provide workplace adjustments, to monitor and manage sickness absence and to administer benefits.
Where the company processes other special categories of personal data, such as information about ethnic origin, sexual orientation or religion or belief, this is done for the purposes of equal opportunities monitoring. This is to carry out its obligations and exercise specific rights in relation to employment.
Very occasionally, we may process this type of information where it is needed in relation to legal claims or where it is needed to protect your interests, or someone else's and you are not capable of giving your consent or you have already made the information public.
All personal data obtained and held by the Company will:
In addition, personal data will be processed in recognition of an individuals' data protection rights, as follows:
The Company has taken the following steps to protect the personal data of relevant individuals, which it holds or to which it has access:
Relevant individuals are entitled to request data held about them on the system or in relevant files. The Company will endeavour to provide this data within a reasonable time. There is no charge for requesting this data.
Employees are only entitled to access data about themselves and will not be provided with data relating to other employees or third parties. It may be possible to block out data relating to a third party or conceal his or her identity, and if this is possible the Company may do so.
Data that is classified as the opinion of another person will be provided unless it was given on the understanding that it will be treated confidentially. Employees who express opinions about other employees in the course of their employment should bear in mind that their opinion may be disclosed in an access request, e.g. performance appraisals.
An employee who is dissatisfied with the outcome of an access request has the option of using the Company's grievance procedure.
The Company may be required to disclose certain data/information to any person. The circumstances leading to such
Disclosures include:
These kinds of disclosures will only be made when strictly necessary for the purpose.
The Company adopts procedures designed to maintain the security of data when it is stored and transported.
In addition, employees must:
The Company does not transfer personal data to any recipients outside of the EEA.
New Paragraph
We wholly committed to this Policy, and hereby state that it is the responsibility of every individual employee of the company to ensure that all security plans, standards, procedures, work instructions and actions fully meet with agreed company and customer requirements.
Paul Smith,
Managing Director
12T" January 2023
Copyright © 2024 Deploy Recruitment Group Ltd. Reg No: 14275746
All Rights Reserved | Information Security, Personnel File & Data Protection Policy | Data Protection | Developed by Shazamme